Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z81H1vnjVuC0C0xtMu4PFZZVB7E.roa
File: z81H1vnjVuC0C0xtMu4PFZZVB7E.roa (raw, json)
Hash identifier: TPCF5ssu7El9fC4PmIzJKOgybFUNG30Yd+XCAdwKfZk=
Subject key identifier: CF:CD:47:D6:F9:E3:56:E0:B4:0B:4C:6D:32:EE:0F:15:96:55:07:B1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6E3D6F516A1A81D76E6257519F038F8B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z81H1vnjVuC0C0xtMu4PFZZVB7E.roa
Signing time: Sat 03 Feb 2024 09:12:16 +0000
ROA not before: Sat 03 Feb 2024 09:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6e:3d:6f:51:6a:1a:81:d7:6e:62:57:51:9f:03:8f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 3 09:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfcd47d6f9e356e0b40b4c6d32ee0f15965507b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:b5:e9:7a:f0:49:8d:c9:48:61:67:c3:ff:
ce:6b:a6:58:f7:e1:d6:3d:fe:0e:76:7a:1e:3c:bb:
b2:1a:ae:1f:4c:99:d3:72:92:c7:19:6d:ed:a2:38:
38:ba:ca:9e:03:af:59:8e:00:1a:b0:04:1e:7e:90:
d8:86:33:62:f5:27:56:44:3c:63:37:bd:a5:49:70:
43:1e:9d:05:ae:d8:dd:b1:02:08:b4:79:5b:09:fc:
82:be:61:27:89:e1:2d:8d:75:41:8b:87:7b:44:0c:
76:0b:92:ed:1d:47:24:9c:a4:dd:d2:fd:6f:da:f3:
fc:3b:01:44:25:cf:25:61:1e:81:68:99:bc:9a:cf:
03:05:5f:11:98:5f:3a:29:cd:a7:e2:a8:23:91:3b:
49:ca:74:23:2e:4e:99:81:be:6e:eb:bd:cb:61:4b:
5b:3a:20:8b:b2:5f:cb:21:10:ed:18:a0:69:15:77:
0c:91:dd:8b:84:f0:8e:72:64:bd:ec:cc:32:6a:04:
93:a0:d6:64:b4:e3:1c:42:84:e1:4d:1b:cc:0b:3a:
c0:29:63:48:a4:d0:c5:2b:c6:30:16:1b:fd:aa:0a:
e0:63:73:8e:45:7a:94:ac:ae:c1:53:6b:fe:ad:92:
6f:45:f9:8d:a4:8e:c8:b7:4d:e6:be:d0:0b:d2:84:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:47:D6:F9:E3:56:E0:B4:0B:4C:6D:32:EE:0F:15:96:55:07:B1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/z81H1vnjVuC0C0xtMu4PFZZVB7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:6d:5c:88:8b:11:48:4b:7c:bb:0e:fb:20:44:f9:0f:b1:d0:
fb:92:ee:12:19:a8:e3:90:c5:24:b7:3a:de:5f:3b:1a:b8:00:
55:04:09:01:a1:70:6f:3f:93:b4:13:de:cf:99:90:f4:5a:80:
62:70:6d:8d:d7:7f:67:01:dc:be:ff:d6:66:8f:53:8b:4d:86:
04:2e:b8:02:57:d9:12:02:e6:08:e7:fd:22:77:a9:f0:5e:b9:
c4:4a:dd:d3:7f:cc:5d:38:70:bd:59:5f:da:c1:8d:81:fe:39:
2c:eb:e1:96:55:00:3c:ae:7e:52:68:c6:39:8b:f4:5a:42:48:
ab:dc:9b:77:6f:ff:78:90:6c:9f:2f:6c:43:c6:fe:cf:3a:91:
c0:a9:56:23:b2:97:a6:ca:d8:99:02:b2:ba:b9:64:00:b7:34:
f4:3f:d9:05:1e:1f:55:30:18:47:af:6c:90:a0:fe:8a:4e:1b:
6b:b5:59:54:9c:8e:42:31:37:7b:ce:40:d9:01:58:ac:18:67:
13:42:ca:05:b1:5f:d7:16:f9:c5:1a:94:31:b6:8c:5d:dd:a0:
29:7c:42:ea:2a:d0:05:6b:fc:09:4b:83:e7:42:5a:76:32:f7:
07:57:39:8e:43:af:98:fb:dc:54:91:ee:39:18:f0:cc:2d:31:
1e:d3:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:29:30 2025 by rpki-client